WO2012071945A1

WO2012071945A1 - Method and device for backing up and upgrading bootstrap

Info

Publication number: WO2012071945A1
Application number: PCT/CN2011/080599
Authority: WO
Inventors: 杨细龙
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-12-03
Filing date: 2011-10-10
Publication date: 2012-06-07
Also published as: CN102023908B; CN102023908A

Abstract

Disclosed are a method for backing up a bootstrap, for achieving the backup of the bootstrap and improving the reliability of system start-up. The method includes: acquiring a master bootstrap in a first storage area and starting up according to the default or recorded identification information about the first storage area, wherein the first storage area is a current storage area; recording the identification information about the first storage area after successful start-up; and backing up the master bootstrap of the first storage area into a second storage area in the same storage. Also disclosed is a method for upgrading a bootstrap, for achieving the upgrading of the bootstrap. The method includes: determining whether a bootstrap is required to be upgraded after having started up according to a master bootstrap in a first storage area; acquiring upgrading information when it is determined to upgrade the bootstrap; and upgrading the backed up bootstrap in a second storage area according to the acquired upgrading information. Also disclosed is a device for achieving the method.

Description

Method and device for booting program backup and upgrade

The present invention relates to the field of embedded and computer, and in particular, to a method and apparatus for booting and upgrading a boot program. Background technique

In complex embedded products, a simple bootloader code is usually required after powering up or resetting the device. The central processing unit (CPU) is configured to boot the minimum system startup. After the CPU's minimum system has successfully run, the drivers and system software of the peripheral function devices are loaded and the embedded products are functioning properly.

The boot code is generally stored in a non-volatile memory device, and the code size is generally 1K to 512K bytes. Due to various abnormal conditions, the data in the storage device may change, causing the device or board to fail to start, which affects the reliability of the product performance. Therefore, it is important to make the necessary backups of the startup program code. At present, there are three popular startup code backup methods: 1. Using two identical storage devices to back up the boot code, which will occupy more hardware resources and occupy more storage space. Store the memory of the boot program, and specify one of the memories as the main boot memory. When backing up the boot program, not only the corresponding registers and other parts need to be modified, but also the original boot program information needs to be modified accordingly, which makes the verification method more complicated; Setting two storage areas for storing the boot program in one memory, and specifying one of the storage areas as the main boot storage area, and additionally adding storage hardware to store the chip select signal, the system needs to start from the main boot memory every time the system starts up. This will slow down the startup speed, reduce the startup efficiency, and increase the hardware resources to store the chip select signal, resulting in waste of hardware resources. Moreover, the above method increases the auxiliary device while increasing the unreliable factors of system operation. Summary of the invention

The embodiment of the invention provides a method for booting and upgrading a boot program, which is used for implementing backup of the boot program and improving the reliability of the system.

A bootloader backup method, the method comprising:

Obtaining, according to the identifier information of the default or the first storage area, the main booting program in the first storage area, and starting; wherein, the first storage area is a current storage area;

After the startup is successful, the identification information of the first storage area is recorded;

The primary boot program in the first storage area is backed up to the second storage area in the same memory. A bootloader upgrade method, the method comprising:

After starting according to the main boot program in the first storage area, determine if an upgrade is required! a program; wherein, the first storage area is a current storage area;

Obtain upgrade information when it is determined that the bootstrap is to be upgraded;

The backup boot program in the second storage area is upgraded according to the obtained upgrade information.

A boot program backup device, the device includes: an operation module and a control module; wherein, the operation module is configured to obtain a main boot program in the first storage area according to the default or the recorded identification information of the first storage area, And starting, wherein the first storage area is a current storage area;

And a control module, configured to: after the startup is successful, record the identification information of the first storage area; and back up the primary boot program in the first storage area to the second storage area in the same storage.

A booting program upgrading apparatus, the apparatus comprising: a control module and an operation module; wherein, the control module is configured to determine whether the booting program needs to be upgraded after starting according to the main booting program in the first storage area; The first storage area is the current storage area;

The operation module is configured to obtain upgrade information when determining that the boot program is to be upgraded, and upgrade the backup boot program in the second storage area according to the obtained upgrade information.

According to the embodiment of the present invention, according to the default or recorded identification information of the first storage area, the first a main boot program in a storage area, and is started; wherein, the first storage area is a current storage area; after the startup is successful, the identification information of the first storage area is recorded; and the main boot program in the first storage area is Back up to the second storage area in the same storage. The embodiment of the present invention provides two boot program storage areas in one memory, which does not occupy excessive hardware resources; no one of the two boot program storage areas is specified as the main boot program storage area, and the system can be started according to the last boot time. The information of the boot program storage area saved after successful is started from the boot program storage area, and it is not necessary to be booted from the main boot program storage area, so that the startup speed is faster and the startup efficiency is higher; after the correct startup, the current storage area is The code is backed up to the non-current storage area, and the backup of the boot program is realized, which ensures the correctness of the boot program being backed up. In the backup process, there is no need to modify the code of the current storage area, but only the corresponding register and other parts are modified, the modification content is small, the verification process is relatively simple, and the backup can be directly performed, and the operation process is simple. Moreover, when the identification information of the current storage area is recorded as the chip selection signal, it can be completed by software without occupying hardware resources.

After the startup according to the main boot program in the first storage area, the embodiment of the present invention determines whether the boot program needs to be upgraded; when it is determined that the boot program is to be upgraded, the upgrade information is obtained; and the obtained upgrade information is used in the second storage area. The backup bootloader is upgraded. The embodiment of the present invention selects an upgrade in a non-current storage area to prevent the board from being restarted because the upgrade is unsuccessful, thereby improving the reliability of the system. DRAWINGS

1 is a main structural diagram of a bootloader backup device according to an embodiment of the present invention;

1 is a detailed structural diagram of a bootloader backup device according to an embodiment of the present invention;

3 is a main flowchart of a method for backing up a boot program according to an embodiment of the present invention;

4 is a flowchart of a detailed method for determining whether a startup is successful according to an embodiment of the present invention;

FIG. 7 is a schematic diagram of whether it is required to upgrade after failing to upgrade a non-current storage area according to an embodiment of the present invention; Detailed method flow chart for the current storage area. detailed description

The embodiment of the present invention obtains the main booting program in the first storage area according to the default or the recorded identification information of the first storage area, and starts, wherein the first storage area is the current storage area; after the startup is successful And recording the identification information of the first storage area; and backing up the main navigation program in the first storage area to the second storage area in the same storage.

The embodiment of the present invention provides two boot program storage areas in one memory, which does not occupy excessive hardware resources; no one of the two boot program storage areas is specified as the main boot program storage area, and the program storage area is started, without limitation It must be started from the main boot program storage area to make the startup speed faster and the startup efficiency higher. After the correct startup, the current storage area code is backed up to the non-current storage area, which realizes the backup of the boot program and ensures the backup. The correctness of the bootloader. During the backup process, there is no need to modify the code of the current storage area, and the backup can be directly performed, and the operation process is simple. Moreover, when the identification information of the current storage area is recorded as a chip select signal, it can be completed by software without occupying hardware resources.

After the startup according to the main boot program in the first storage area, the embodiment of the present invention determines whether the boot program needs to be upgraded; when it is determined that the boot program is to be upgraded, the upgrade information is obtained; and the obtained upgrade information is used in the second storage area. The backup bootloader is upgraded. The embodiment of the present invention selects an upgrade in a non-current storage area to prevent the board from being restarted because the upgrade is unsuccessful, thereby improving the reliability of the system.

1 is a main structural diagram of a bootloader backup device according to an embodiment of the present invention. As shown in FIG. 1, the bootloader backup device includes an operation module 101 and a control module 102.

The operation module 101 is configured to obtain a main booting program in the first storage area according to the default or the first identification information of the recorded storage area, and start, wherein the first storage area is a current storage area; Specifically, the boot program stored in the current storage area is referred to as a main boot program, and the boot program stored in the non-current storage area is referred to as a backup boot program, and the main boot program and the backup boot program are relatively speaking, for example, at a certain At one moment, the current storage area is the first storage area, then the boot program stored in the first storage area is the main boot program, and the boot program stored in the second storage area is the backup boot program; at the next moment, the current storage area For the second storage area, the boot program stored in the second storage area is the main boot program, and the boot program stored in the first storage area is the backup boot program. After the operation module 101 is notified by the control module 102 in this embodiment, the boot program storage area is determined in the storage module 103 according to the address information of the boot program storage area that was successfully started last time, and the boot program storage area is used as the current storage area. And starting according to the main boot program stored in the current storage area, that is, starting according to the code stored in the current storage area.

If the control counter for controlling the reset operation in the control module 102 overflows, the startup is unsuccessful, and the reset operation is performed. If the operation module 101 is located on the board, the reset operation may be a reset board. When the control technology overflows, a reset signal is sent to the operating module 101. The control counter may be a watchdog counter, and when it overflows, a reset signal may be issued to reset the board. The operation module 101 switches the backup boot program stored in the second storage area of the non-current storage area as the main boot program, that is, the first storage area and the second storage area are mutually switched, and the second storage area is the current storage area, and the operation is performed. The module 101 is restarted according to the main boot program stored in the second storage area. The control module 102 records the total number of starts, and each time the start is performed, the total number of starts is incremented by one. If the control counter in the control module 102 overflows, the startup is still unsuccessful, the reset operation is performed, and the backup boot program stored in the first storage area is switched to the main boot program again, and the operation module 101 again according to the main storage stored in the first storage area. The boot program is started, and the startup process is repeated. If the number of startups reaches the first set value, for example, the first set value is M, and the startup is still unsuccessful, an alarm message may be sent, which may be a software alarm. It can also be a hardware alarm. For example, the hardware alarm can be the control module 102 with an indicator light or a buzzer. If the device is used as an alarm, the system fails to be started and the board is faulty. The number of times M may be a preset value and may be saved in the control module 102. The control module 102 can have a first counter for recording the total number of starts of the operation module 101 during the boot program backup process. The value of the first counter is incremented by one each time the operation module 101 starts. If the board is successfully started, the operation module 101 notifies the control module 102 to save the information of the current storage area, where the information includes at least the identification information of the current storage area, as the chip selection signal at the next startup. Clearing and closing the control counter, and if the main boot program in the current storage area is inconsistent with the backup boot program in the non-current storage area, the operation module 101 can copy the boot program code in the current storage area to the non-current storage area. In the implementation of the backup of the bootloader. Start downloading the full software version to get started.

Further, the operation module 101 is further configured to: when it is determined that the boot program is to be upgraded, obtain upgrade information, and upgrade the backup boot program in the second storage area according to the obtained upgrade information. After the operation module 101 is successfully started, the upgrade process may be automatically performed according to the setting of the control module 102, or may be performed after receiving the upgrade notification sent by the control module 102. The operation module 101 first upgrades the non-current storage area according to the upgrade information. The embodiment of the present invention takes the non-current storage area as the second storage area as an example. Because the current storage area, that is, the first storage area has been able to boot the operation module 101 to start normally, upgrading the second storage area first can ensure that the operation module 101 can still be normally started from the first storage area when the upgrade fails. After receiving the chip selection signal of the control module 102, the operation module 101 switches the upgraded boot program stored in the non-current storage area to the main boot program, performs a reset operation, and according to the main boot program stored in the second storage area. Start up. If the control counter in the control module 102 overflows, the startup is unsuccessful, and the operation module 101 switches the backup boot program stored in the first storage area to the main boot program, and upgrades the second storage area again, and thus repeats. If the number of upgrade failures of the second storage area reaches the second set value, for example, the second set value is N, it is determined that the upgrade to the non-current storage area, that is, the second storage area fails, and an alarm information may be sent, It is a software alarm or a hardware alarm. For example, the hardware alarm may be an alarm signal sent by the indicator light or buzzer of the control module 102. And an inquiry message is sent to ask whether to continue the upgrade process in the current storage area, that is, the first storage area. If the upgrade is selected to continue, the information stored in the first storage area is copied to the second storage area, and the old information stored in the second storage area is first erased before copying, and the backup stored in the second storage area is stored. The boot program switches to the main boot program, performs a reset operation, starts according to the main boot program stored in the second storage area, and starts upgrading the first storage area. If you choose not to continue the upgrade, it is determined that the upgrade failed.

The number of upgrade failures N may be a preset value, and may be saved in the control module 102. The control module 102 may have a second counter for calculating the number of upgrade failures for a bootloader storage area. When a bootloader is upgraded once, the value of the second counter is incremented by one.

Preferably, the operation module 101 can be specifically a CPU. The operation module 101 can be located on a single board.

The control module 102 is configured to record the identification information of the first storage area after the startup is successful; and back up the main boot program in the first storage area to the second storage area in the same storage.

Specifically, in the embodiment of the present invention, a board needs to be started as an example. The control module 102 can store information of a successful startup on the board, where the information includes at least the identification information of the bootloader storage area used in the last successful startup. In the embodiment of the present invention, the device backed up by the program includes two bootstraps. For example, the program storage area is located in the storage module 103. The two bootloader storage areas may have respective identification information, for example, one bootloader storage area is the first storage area and the other bootloader storage area is the second storage area. When the board is successfully started, the control module 102 records the identification information of the current storage area at this time as the chip selection signal to be started next time. When the board needs to be started, the control module 102 reads the information of one successful startup of the board stored in the internal storage, and the storage module 103 according to the identifier information of the boot program storage area used in the last successful startup included in the information. Determine the bootloader store, for example, The address information of the boot program storage area may be determined in the storage module 103, and the address information of the boot program storage area is used as a chip select signal, according to the! The address information of the program storage area selects the boot program storage area to notify the operation module 101 to switch the boot program storage area to the current storage area, and starts according to the main boot program stored in the current storage area. Wherein, the notification may be sent to the operation module 101 through a lead to notify the operation module 101 according to the main stored in the boot program storage area! The program starts.

Further, the control module 102 may include a control counter, and the control module 102 is further configured to determine whether the control counter overflows, and start the control counter while the control module 102 reads the information of the last successful startup stored in the internal control system. The control counter starts counting automatically. If the board is successfully booted, the operation module 101 notifies the control module 102 to clear and close the control counter. If the control counter does not overflow, it is determined that the startup is successful, and if the control module 102 has not received the notification of clearing or closing the control counter for a certain period of time, the control counter will overflow, causing an interrupt, causing a system reset. Preferably, the control counter can be a watchdog counter. When the watchdog counter overflows, a reset signal is generated to reset the board. If the board is successfully started, the control module 102 saves the information of the current storage area according to the notification of the operation module 101, and the information includes at least the identification information of the current storage area, and the counter is cleared and closed. The control module 102 is further configured to determine whether the boot program needs to be upgraded after booting according to the main boot program in the first storage area.

Further, the control module 102 is further configured to determine that the boot program needs to be upgraded after the operation module 101 starts according to the main boot program in the first storage area. During the upgrade process, when receiving the notification of the comparison module 104, the control module 102 changes the chip selection signal, and sets the backup boot program stored in the upgraded non-current storage area as the main boot program, for example, upgrading the second storage area. After that, the second storage area and the first storage area are switched to each other, and the second storage area is selected as the current storage area. At this time, the backup boot program stored in the second storage area is the main boot program, the control counter is turned on, and the operation is instructed. Module 101 performs a reset operation and according to the main memory stored in the second storage area The bootloader starts.

Preferably, the control module 102 can be a programmable logic device, for example, an EPLD (Erasable Programmable Logic Device). The control module 102 may or may not be located on a single board. The control module 102 is not reset when the operation module 101 performs a reset operation.

2 is a detailed structural diagram of a bootloader backup device according to an embodiment of the present invention. As shown in FIG. 2, the device further includes a storage module 103, a comparison module 104, and a determination module 105. The storage module 103 is configured to provide Bootloader storage area.

Specifically, in the embodiment of the present invention, the storage module 103 may include two boot program storage areas, that is, a first storage area and a second storage area, and the first storage area and the second storage area may be located in one memory. The bootloader storage area used is called the current storage area when the board is booted, and the unused bootloader storage area is called the non-current storage area. The storage module 103 can be located on the board or not on the board. The memory module 103 is not reset when the operation module 101 performs a reset operation.

The comparison module 104 is configured to compare the bootstrap stored in the two bootloader storage areas.

Specifically, after the board is successfully booted, the comparison module 104 compares the main boot program stored in the current storage area with the backup boot program stored in the non-current storage area. For example, a bitwise comparison manner may be adopted. Take the current storage area as the first storage area and the non-current storage area as the second storage area as an example. If the primary boot program stored in the first storage area is inconsistent with the backup boot program stored in the second storage area, the operation module 101 is notified to copy the boot program stored in the first storage area into the second storage area, and needs to be notified before copying. The operation module 101 first erases the old backup boot program stored in the second storage area. If the main boot program stored in the first storage area coincides with the backup boot program stored in the second storage area, the operation module 101 is notified that the startup process ends, so that the operation module 101 starts normal operation. After the backup process is completed, the control module 102 can be notified to generate a reset signal, and the reset signal is transmitted to the operation module 101, so that the operation module 101 performs a reset operation, resets the single-board device except the control module 102, and prepares the device. The backup boot program stored in the second storage area is switched to the main boot program, and the operation module 101 continues to boot according to the main boot program stored in the second storage area to determine the backup! Whether the program can enable the operation module 101 to complete the startup, and verify the correctness of the backup boot program.

Before the upgrade process, the comparison module 104 first compares whether the main boot program stored in the current storage area is consistent with the backup boot program stored in the non-current storage area. If not, the operation module 101 can be notified to start the upgrade operation, otherwise the operation module 101 is notified. No upgrade is required. Take the current storage area as the first storage area and the non-current storage area as the second storage area as an example. In the upgrade process, after the operation module 101 upgrades the second storage area according to the upgrade information saved by itself, the comparison module 104 is further configured to save the backup boot program stored in the upgraded second storage area and the operation module 101. The upgrade information is compared. The second storage area is upgraded, and the upgrade information in the operation module 101 is burned into the non-current storage area. After the programming is completed, the upgrade information in the operation module 101 is compared with the backup boot program stored in the second storage area after the burning, if the backup boot program stored in the upgraded second storage area is in the operation module 101. If the saved upgrade information is consistent, it is determined that the programming is successful. At this time, the control module 102 may be notified to set the backup boot program stored in the upgraded second storage area as the main boot program, if the upgraded second storage area is stored. If the backup boot program is inconsistent with the upgrade information saved in the operation module 101, if it is determined that the burning fails, the operation module 101 may be notified to perform the upgrade again, or the upgrade may be abandoned. After the upgrade of the backup boot program stored in the second storage area is successful, the comparison module 104 can receive the notification of the operation module 101, and perform the main boot program stored in the first storage area and the backup boot program stored in the second storage area. For comparison, if the unupgraded primary boot program stored in the first storage area is inconsistent with the upgraded backup boot program stored in the second storage area, the operation module 101 may be notified to copy the boot program stored in the second storage area to In the first storage area.

The determining module 105 is configured to determine whether the total number of starts exceeds the first set value.

Specifically, the first set value may be M, and may be saved in the control module 102. When the startup is unsuccessful, the determining module 105 determines, according to the value in the first counter, the total number of startups at this time is If the number of starts reaches M, the alarm information may be sent, which may be a software alarm or a hardware alarm. For example, the hardware alarm may be the control module 102 using an indicator light or a buzzer as an alarm signal. The system fails to start and the board is faulty. If the number of starts does not reach M, the notification operation module 101 can continue the startup operation. The determining module 105 is further configured to determine whether the number of upgrade failures exceeds a second set value, and the second set value may be N, which may be saved in the control module 102. When the upgrade is unsuccessful, the determining module 105 determines, according to the value in the second counter, whether the number of upgrade failures to the non-current storage area reaches N at this time. If the number of upgrades reaches N, an alarm message may be sent, which may be a software alarm. It can also be a hardware alarm. For example, the hardware alarm may be that the control module 102 uses an indicator light or a buzzer as an alarm signal to determine that the upgrade of the non-current storage area fails, and may notify the operation module 101 to send an inquiry message to ask whether Need to continue to upgrade the current storage area. If the number of upgrades does not reach N, the notification operation module 101 can continue the upgrade process.

The following describes the bootloader backup method through a specific process.

FIG. 3 is a main flowchart of a method for backing up a boot program according to an embodiment of the present invention. As shown in FIG. 3, the main method for booting a backup program in the embodiment of the present invention is as follows:

Step 301: Obtain a primary booting program in the first storage area according to the default or the recorded identification information of the first storage area, and start.

Step 302: After the startup is successful, record the identification information of the first storage area.

Step 303: Back up the main boot program in the first storage area to the second storage area in the same storage.

Further, when the current storage area is unsuccessful and receives the reset signal, the method further includes: performing a reset operation, switching the second storage area to the current storage area, restarting, and recording the total number of startups.

Further, each time the reset signal is received, the method further includes: determining whether the total number of startups is greater than the first set value, and when the determination result is yes, determining that the startup fails, and issuing an alarm message, Otherwise continue the reset operation.

Further, after the startup is successful, before the primary boot program in the first storage area is backed up to the second storage area in the same storage, the method further includes: determining whether the primary boot program stored in the first storage area is The backup boot program stored in the second storage area is consistent. When the determination result is no, the primary boot program stored in the first storage area is backed up to the second storage area.

The present invention also includes a bootloader upgrade method, the method comprising: determining whether a bootloader needs to be upgraded after booting according to a primary bootloader in the first storage area; wherein the first storage area is a current storage area When you are sure that you need to upgrade the bootloader, get the upgrade information; upgrade the backup bootloader in the second storage area according to the obtained upgrade information.

Further, before the determining needs to upgrade the booting program, the method further includes: determining whether the primary booting program stored in the first storage area is consistent with the backup booting program stored in the second storage area, and determining whether the result is negative Upgrade the bootstrap.

Further, after the upgrade booting program in the second storage area is upgraded according to the obtained upgrade information, the method further includes: switching the upgraded second storage area to the current storage area; according to the second storage area The main boot program in the startup starts, and the upgrade is successful when the startup is successful.

Further, after the starting according to the main booting procedure in the second storage area, the method further includes:

Determining whether the control counter overflows, and when the judgment result is no, determining that the startup is successful, thereby determining that the upgrade is successful;

When the determination result is yes, it is determined whether the number of upgrade failures is greater than a second preset value. When the number of upgrade failures is not greater than the second preset value, the backup boot program in the first storage area is switched to the primary boot program. Reset operation, and starting according to the main boot program stored in the first storage area;

When the number of upgrade failures is greater than the second preset value, it is determined that the upgrade to the second storage area fails. Sending an alarm message, and continuing to determine whether the first storage area needs to be upgraded. When the first storage area needs to be upgraded, the backup boot program in the first storage area is copied to the second storage area to perform a reset operation. And switching the second storage area to the current storage area, according to the main storage stored in the second storage area! The program starts.

FIG. 4 is a flowchart of a detailed method for determining whether the startup is successful according to an embodiment of the present invention. As shown in FIG. 4, the detailed method for determining whether the startup is successful in the embodiment of the present invention is as follows:

Step 401: The board is powered on. In the embodiment of the present invention, whether the board is successfully started is taken as an example; Step 402: reading the boot program storage area information that was successfully started last time;

After the operation module 101 is successfully started, the control module 102 saves the information of the boot program storage area that is successfully started, and the information includes at least the identification information of the successfully booted boot program storage area, so that the operation module 101 is based on the identification information. Determine the address information for the bootloader store. In the embodiment of the present invention, the boot storage area is a first storage area as an example.

Step 403: Turn on the control counter. The control module 102 turns on the control counter, and controls the counter to start counting;

Preferably, the control counter can be a watchdog counter.

Step 404: Place the bow stored in the first storage area! The program switches to the main boot program; Step 405: According to the main memory stored in the first storage area! The program starts to start;

Step 403 and step 404 need to be performed simultaneously. The control module 102 sends the identification information of the boot program storage area to the operation module 101 as a chip select signal, which is the identification information of the successfully booted boot program storage area recorded in step 402. The operation module 101 determines the boot program stored in the first storage area as the main boot program according to the chip select signal, and starts the boot process.

Step 406: Determine whether the control counter overflows. When the result of the determination is YES, the process proceeds to step 407. Otherwise continue to step 413;

Step 407: Determine whether the number of starts is greater than M. When the judgment result is no, continue the step. 408, otherwise proceed to step 412;

Specifically, it is determined by the value of the first counter whether the number of starts is greater than M.

Step 408: Switch the backup boot program stored in the second storage area to the main boot program, and reset the board.

Specifically, the control module 102 clears and closes the control counter while resetting the board, and the control counter starts counting again. If the operation module 101 and the control module 102 are both located on the board, the reset board operation in this step should be changed to the reset operation module 101. If the operation module 101 is located on the board and the control module 102 is not located on the board, then This step can be to reset the board.

Step 409: Start according to the main boot program stored in the second storage area;

Step 410: Determine whether the control counter overflows. When the determination result is yes, proceed to step 411, otherwise continue to step 413;

Step 411: Determine whether the number of starts is greater than M, when the determination result is no, proceed to step 404, and still need to reset the board while performing step 404, otherwise continue to step 412;

Step 412: Determine that the startup fails, and issue an alarm message;

Step 413: Determine that the startup is successful, and save the identification information of the current storage area. At the same time, control module 102 clears and closes the counter.

Step 501: The startup succeeds, and the identifier information of the current storage area is saved.

Specifically, this step is the same as step 413 in the flow shown in FIG. 4, and after the step 413 in the flow of FIG. 4 is executed, the following flow can also be executed. In the embodiment of the present invention, the current storage area is the first storage area, and the non-current storage area is the second storage area.

Step 502: determining whether the primary boot program stored in the first storage area is consistent with the backup boot program stored in the second storage area, and if the determination result is no, proceed to step 503, otherwise proceed to step 505; Step 503: Back up the main boot program stored in the first storage area to the second storage area.

Specifically, the backup is specifically performing backup processing on the main boot program stored in the first storage area after the successful startup. Among them, the backup method can be copy.

Step 504: It is determined whether the primary boot program stored in the first storage area is consistent with the backup boot program stored in the second storage area. When the determination result is no, proceed to step 503, otherwise continue the step.

505;

Specifically, this step is to prevent errors during the backup process.

Step 505: The bootloader backup is complete.

After the step 505 in the process of FIG. 5 is performed, the backup boot program stored in the second storage area can be further switched to the main boot program, the reset operation is performed, and the boot process is continued to verify whether the boot program after the backup can be The operation module 101 is caused to complete startup.

Specifically, the upgrade information in the operation module ₁₀ ι is burned into the non-current storage area. In the embodiment of the present invention, the second storage area is a non-current storage area, and the first storage area is a current storage area.

Step 602: Determine whether the boot program burned in the second storage area is consistent with the upgrade information. When the determination result is yes, proceed to step 603, otherwise continue to step 601;

Specifically, after the programming is completed, the upgrade information saved in the operation module 101 is compared with the boot program burned into the second storage area, if the upgrade information in the operation module 101 is burned into the non-current storage area. If the boot program is consistent, the burning is successful. If the upgrade information in the operation module 101 is inconsistent with the boot program in the non-current storage area, the burning is unsuccessful and the burning is required.

Step 603: Send the updated chip select signal to the operation module 101, and turn on the control counter. Specifically, the module 103 sends the updated identification information of the second storage area to the operation module 101 as a chip selection signal, and turns on the control counter, and the control counter starts counting.

Step 604: Set the upgraded backup boot program stored in the second storage area as the main boot program, perform a reset operation, and the operation module 101 stores the upgraded backup boot program stored in the second storage area according to the chip select signal. Set as the main boot program;

Step 605: Start according to the main boot program stored in the second storage area;

Step 606: Determine whether the control counter overflows, when the determination result is yes, proceed to step 607, otherwise continue to step 610;

Specifically, when the judgment result is yes, it indicates that the upgrade fails, otherwise the upgrade is successful. Step 607: determining whether the number of upgrade failures is greater than N, when the determination result is no, proceed to step 608, otherwise proceed to step 609;

Specifically, it is determined by the value of the second counter whether the number of upgrade failures is greater than N.

Step 608: Switch the backup boot program stored in the first storage area to the main boot program, perform a reset operation, and continue to step 601. At this time, the control module 102 clears the control counter, and the control counter starts to recount;

Step 609: Determine that the non-current storage area upgrade fails, and the alarm information may be sent; Step 610: Determine that the non-current storage area is successfully upgraded.

FIG. 7 is a flowchart of a detailed method for determining whether to upgrade a current storage area after a failure to upgrade a non-current storage area according to an embodiment of the present invention. As shown in FIG. 7, the embodiment of the present invention determines that the upgrade to a non-current storage area fails. Whether you need to upgrade the current storage area detailed method flow:

Step 701: Determine that the second storage area upgrade fails.

Specifically, this step is the same step as step 612 in the flow shown in FIG. 6. After performing step 612 in the flow shown in FIG. 6, the following steps can be continued. In the embodiment of the present invention, the second storage area is a non-current storage area, and the first storage area is a current storage area.

Step 702: Determine whether it is necessary to upgrade the first storage area. When the judgment result is yes, continue step Step 703, otherwise the process ends;

Step 703: Copy the primary boot program stored in the first storage area to the second storage area; wherein, the backup boot program stored in the second storage area needs to be erased before copying. Step 704: Perform a reset operation. At this time, the control module 102 clears the control counter, and controls the counter to start counting again.

Step 705: Switch the backup boot program stored in the second storage area to the primary boot program. Step 706: Upgrade the first storage area. The upgrade information in the operation module 101 is burned into the first storage area. This step is the same as step 601 shown in Fig. 6. The following flow is also consistent with Fig. 6. That is, when the upgrade to the non-current storage area fails, an attempt is made to continue the upgrade of the current storage area. The operation module 101 may be automatically upgraded after being successfully started, or may be upgraded after receiving the upgrade notification.

The embodiment of the present invention obtains the main booting program in the first storage area according to the default or the recorded identification information of the first storage area, and starts, wherein the first storage area is the current storage area; after the startup is successful And recording the identification information of the first storage area; and backing up the main boot program in the first storage area to the second storage area in the same storage. The embodiment of the present invention provides two boot program storage areas in one memory, which does not occupy excessive hardware resources; no one of the two boot program storage areas is specified as the main boot program storage area, and the system can be started according to the last boot time. The information of the boot program storage area saved after successful is started from the boot program storage area, and it is not necessary to be booted from the main boot program storage area, so that the startup speed is faster and the startup efficiency is higher; after the correct startup, the current storage area is The code is backed up to the non-current storage area, and the backup of the boot program is realized, which ensures the correctness of the boot program being backed up. During the backup process, there is no need to modify the code of the current storage area, and the backup can be directly performed, and the operation process is simple. Moreover, when the identification information of the current storage area is recorded as the chip selection signal, it can be completed by software without occupying hardware resources. The embodiment of the present invention further determines that the boot program needs to be upgraded under the main boot program in the first storage area; obtains the upgrade information; and performs the backup boot program in the second storage area according to the obtained upgrade information. Upgrade. The embodiment of the present invention selects the upgrade in the non-current storage area to prevent the board from being restarted due to the unsuccessful upgrade, thereby improving the reliability of the system. The upper limit value of the total number of times of starting the operation module 101 is set. If the total number of startups exceeds the upper limit value, it is determined that the startup fails, the operation module 101 is prevented from being continuously started, resources are wasted, and the hardware is easily damaged. After the operation module 101 is properly started, or after receiving the upgrade notification, the operation module 101 can upgrade the boot program storage area to obtain a higher boot program version, and the board startup process is more optimized. Before the upgrade, the master stored in the current store! The program is compared with the backup boot program stored in the non-current storage area. If the two are inconsistent, the upgrade process is performed. Otherwise, no upgrade is required to avoid waste of resources. During the upgrade process, the upgrade information is first verified to ensure the correctness of the upgrade information. After the upgrade is completed, it is also required to start according to the boot program stored in the upgraded boot program storage area to further verify whether the upgrade is successful. Moreover, the non-current storage area is upgraded to ensure that when the upgrade is unsuccessful, the operation module 101 can also start according to the main boot program stored in the current storage area. Moreover, the method and device according to the embodiment of the present invention can support online upgrade, set an upper limit of the number of upgrade failures, and deal with faults that may occur during the upgrade, thereby ensuring the correctness of the upgrade.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Thus, the present invention can take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) in which computer usable program code is embodied.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowcharts, and/or block diagrams, as well as the flow of the flowcharts, and/or block diagrams, and/or combinations of blocks can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, a special purpose computer, an embedded processor or other programmable data processing device to generate a A device that, by means of instructions executed by a processor of a computer or other programmable data processing device, produces means for implementing the functions specified in one or more flows of the flowchart, and/or in a block or blocks of the block diagram. .

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more flows of the flowchart, and/or in a block or blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more flows of the flowchart, and/or in a block or blocks of the block diagram.

The above description is only for the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included. Within the scope of protection of the present invention.

Claims

Claim

A boot program backup method, the method comprising:

The primary boot program in the first storage area is backed up to the second storage area in the same memory.

2. The method according to claim 1, wherein when the reset signal is received before the startup is successful, the method further comprises: performing a reset operation, switching the second storage area to the current storage area, and then restarting, And record the total number of starts.

3. The method according to claim 2, wherein each time the reset signal is received, the method further comprises: determining whether the total number of starts is greater than the first set value, and if so, determining that the start fails, issuing Alarm information; otherwise continue the reset operation.

The method according to claim 1 or 2, wherein after the booting is successful, the method further: before backing up the main boot program in the first storage area to the second storage area in the same memory The method includes: determining whether the primary boot program stored in the first storage area is consistent with the backup boot program stored in the second storage area, and when the determination result is no, backing up the primary boot program stored in the first storage area to the second storage area.

A method for upgrading a boot program, the method comprising:

Obtain upgrade information when it is determined that the bootstrap needs to be upgraded;

The method according to claim 5, wherein before the determining that the boot program needs to be upgraded, the method further comprises: determining whether the primary boot program stored in the first storage area and the backup boot stored in the second storage area The program is consistent. When the judgment result is no, it is determined that the upgrade is required. Program.

The method of claim 5, wherein after the upgrading the backup boot program in the second storage area according to the obtained upgrade information, the method further comprises: upgrading the second storage area Switch to the current storage area; start according to the main boot program in the second storage area, and determine that the upgrade is successful when the startup is successful.

The method of claim 7, wherein the method further comprises: after the booting according to the main booting program in the second storage area, the method further comprises:

When the number of upgrade failures is greater than the second preset value, it is determined that the upgrade of the second storage area fails, the alarm information is sent, and the first storage area needs to be upgraded. Copying the backup boot program in the first storage area to the second storage area, performing a reset operation, and switching the second storage area to the current storage area, according to the primary stored in the second storage area! The program starts.

A boot program backup device, the device comprising: an operation module and a control module;

An operation module, configured to obtain, according to the default or the first identification information of the first storage area, the main booting program in the first storage area, and start, wherein the first storage area is a current storage area;

a control module, configured to: after the startup is successful, record the identification information of the first storage area; and back up the main boot program in the first storage area to the second storage area in the same storage.

The device according to claim 9, wherein the control module is further configured to: when the reset signal is received before the startup is successful, instruct the operation module to perform a reset operation, and record the total number of starts;

The operation module is further configured to restart the second storage area after switching to the current storage area in the reset operation.

The device of claim 10, wherein the device further comprises: a determining module, configured to determine, when each time the reset signal is received, whether the total number of starts is greater than a first set value; The module is further configured to: when the judgment result is yes, determine that the startup fails, and issue an alarm information; when the determination result is no, instruct the operation module to perform a reset operation.

The device according to claim 9 or 10, wherein the device further comprises: a comparison module, configured to back up the main boot program in the first storage area to the same after the startup is successful Before the second storage area in the memory, determining whether the primary boot program stored in the first storage area is consistent with the backup boot program stored in the second storage area;

The operation module is further configured to back up the main boot program stored in the first storage area to the second storage area when the determination result is no.

A booting device upgrade device, the device comprising: a control module and an operation module;

a control module, configured to determine, according to a primary boot program in the first storage area, whether to upgrade the boot program; wherein, the first storage area is a current storage area;

The device according to claim 13, wherein the device further comprises: a comparing module, configured to determine whether the main booting program stored in the first storage area is second or not before the operating module determines that the booting program needs to be upgraded The backup boot program stored in the storage area is consistent. When the judgment result is no, it is determined that the boot program needs to be upgraded.

The device according to claim 13, wherein the operation module is further configured to: after upgrading the backup boot program in the second storage area according to the obtained upgrade information, to upgrade the second storage The area is switched to the current storage area; the startup is started according to the main boot program in the second storage area, and the upgrade is determined to be successful when the startup is successful.

The device according to claim 15, wherein the control module is further configured to: after the operation module starts according to the main boot program in the second storage area, determine whether the control counter overflows, when the judgment result is If no, the startup is successful, and then the upgrade is successful; when the number of upgrade failures is greater than the second preset value, an alarm message is sent;

The device further includes: a determining module, configured to: when determining that the control counter is overflow, continue to determine whether the number of upgrade failures is greater than a second preset value; when the number of upgrade failures is greater than a second preset value, continue to determine whether the A storage area is upgraded;

The operation module is further configured to: when the number of upgrade failures is not greater than the second preset value, switch the backup boot program in the first storage area to the main boot program, perform a reset operation, and store according to the first storage area. Lord! The program is started;

When the number of upgrade failures is greater than the second preset value, it is determined that the upgrade to the second storage area fails; when the first storage area needs to be upgraded, the backup in the first storage area is used? ! The program is copied to the second storage area, performs a reset operation, switches the second storage area to the current storage area, and starts according to the main boot program stored in the second storage area.